XP Smart Defender Pro

XP Smart Defender Pro Description

XP Smart Defender Pro is a fake security tool, which masquerades as a real anti-spyware program. XP Smart Defender Pro was designed by cybercrooks to convince attacked computer users to purchase the so-called licensed version of bogus security software to supposedly remove imaginary malware threats allegedly detected on the compromised PC and, thus, steal money from victims. When installed on the corrupted PC, XP Smart Defender Pro starts a faux system scan and generates nonexistent malware infections to scare PC users into believing their computers are corrupted by various malware infections. XP Smart Defender Pro also shows fake pop-up security notifications that notify PC users their computers are in danger. XP Smart Defender Pro attempts to persuade victims to purchase the so-called licensed version of the falsified security application for supposed removal of imaginary malware infections. In truth, XP Smart Defender Pro does not have the ability to detect or remove any type of malware infections. To protect your computer from damage and save your money, you should not believe or pay for XP Smart Defender Pro because it's a misleading and dangerous security program. If your computer is infected with XP Smart Defender Pro, ESG malware analysts strongly advise you to uninstall XP Smart Defender Pro with a reputable anti-malware program.

Infected with XP Smart Defender Pro? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect XP Smart Defender Pro

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

File System Details

XP Smart Defender Pro creates the following file(s):
# File Name
1 %AppData%\Local\[RANDOM CHARACTERS].exe
2 %AppData%\Local\[RANDOM CHARACTERS]
3 %AppData%\Roaming\Microsoft\Windows\Templates\[RANDOM CHARACTERS]
4 %Temp%\[RANDOM CHARACTERS]
5 %AllUsersProfile%\[RANDOM CHARACTERS]

Registry Details

XP Smart Defender Pro creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = '%1' = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe"'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" – '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Internet Explorer\iexplore.exe"'

More Details on XP Smart Defender Pro

The following messages associated with XP Smart Defender Pro were found:
Attention: Danger! Alert!
System scan for spyware, adware, Trojans and viruses is complete.
XP Smart Defender Pro detected 31 critical system objects. These security breaches may be exploited and lead to the following:
Your system becomes a target for spam and bulky, intruding ads;
Browser crashes frequently and web access speed decreases;
Your personal files, photos, document and passwords get stolen;
Your computer is used for criminal activity behind your back;
Bank details and credit card information gets disclosed.

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 8 + 7 ?